How long has the site been behind cloudflare? I helped a friend run a local forum for his club and that stopped all spam bots. Maybe its just the volume of traffic that attracts them still. Only crappy thing was if you tried to IP ban someone you ended up banning a whole CF proxy, did they ever fix that issue?